apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation (in byte_put_little_endian function in elfcomm.c) via an ELF file, as demonstrated by readelf.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Jul 30, 2024 | Jul 30, 2019 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Jul 28, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutilsUpgrade binutils-devel | Nov 3, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutils-develUpgrade binutils | Sep 28, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Jun 3, 2020 | Jul 30, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Nov 19, 2019 | Jul 30, 2019 |
| Suse | — | Upgrade binutils-develUpgrade cross-ppc64le-binutilsUpgrade cross-sparc64-binutilsUpgrade cross-sparc-binutilsUpgrade cross-xtensa-binutilsUpgrade cross-m68k-binutilsUpgrade cross-i386-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-rx-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-spu-binutilsUpgrade cross-ppc-binutilsUpgrade binutilsUpgrade binutils-goldUpgrade cross-hppa-binutilsUpgrade cross-s390-binutilsUpgrade cross-aarch64-binutilsUpgrade libctf0Upgrade binutils-devel-32bitUpgrade cross-arm-binutilsUpgrade cross-mips-binutilsUpgrade cross-avr-binutilsUpgrade libctf-nobfd0Upgrade cross-ppc64-binutilsUpgrade cross-hppa64-binutilsUpgrade cross-s390x-binutilsUpgrade cross-ia64-binutils | Nov 4, 2020 | Jul 30, 2019 |
| Ubuntu | — | Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade binutilsUpgrade binutils-multiarch (Ubuntu Pro) | Apr 23, 2020 | Jul 30, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 30, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub